Direct uploads, controlled access
Large files move straight to storage through signed upload flows while permission checks stay in the app layer where they belong.
Loading workspace
Cloud Drive
A refined Next.js 16 foundation for secure uploads, predictable sharing, recovery workflows, and audit-ready admin surfaces.
Workspace control plane
Uploads, visibility, audit, and recovery
Current folders
Finance / Q2 planning
Workspace visibility with audit trail
Contracts / Vendor renewals
Workspace visibility with audit trail
Operations / Regional playbooks
Workspace visibility with audit trail
01
Signed upload URL issued for pricing-model-v7.xlsx
02
Public view link revoked by admin policy
03
Deleted folder restored inside retention window
Product shape
Each surface maps to a real requirement from the spec: uploads, visibility, recovery, and admin oversight.
Large files move straight to storage through signed upload flows while permission checks stay in the app layer where they belong.
Nested hierarchy, breadcrumbs, deleted-item recovery, and visibility states are designed into the workspace from the first pass.
Workspace access, public view links, download controls, expiry windows, and revoke paths are represented in the product surface up front.
Critical path
The product shell and supporting utilities are prepared for the signed URL flow described in the spec.
01
Metadata is registered before bytes move so the system can track status, size limits, and owner context from the start.
02
The browser talks to the object store through short-lived credentials instead of routing large payloads through the app server.
03
Completion updates state, makes the record visible, and creates an auditable event trail for recovery and review.
Production baseline
Next steps can layer Better Auth, Neon, Drizzle, Backblaze B2, Resend, and Sentry into the structure already in place.